hyperframes-registry

Pass

Audited by Gen Agent Trust Hub on Oct 8, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill fetches registry metadata and configuration information from the official HeyGen GitHub repository.
  • [COMMAND_EXECUTION]: The skill utilizes a specialized CLI (hyperframes) to perform installation tasks, such as adding blocks or components to the local filesystem.
  • [INDIRECT_PROMPT_INJECTION]: The skill incorporates an attack surface by processing data from an external registry and local component files during the integration process.
  • Ingestion points: Data is ingested through curl requests to the registry manifest and by reading content from files installed in the compositions/ directory.
  • Boundary markers: There are no specific delimiters or instruction-ignore warnings defined for the interpolation of component code snippets.
  • Capability inventory: The skill uses curl for network discovery, the hyperframes CLI for file system modifications, and performs manual file read/write operations.
  • Sanitization: The instructions do not specify any sanitization or validation steps for the content being merged into the host composition.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 8, 2026, 09:49 PM